Okta/SSO integration role

Job Title: Okta/SSO Integration Engineer
Location: Onsite
Job Type: W2

Job Summary:

We are seeking an experienced Okta/SSO Integration Engineer to lead the architecture, design, and implementation of Identity and Access Management (IAM) solutions. The ideal candidate will have extensive experience with Azure AD, Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Federation technologies (SAML, OIDC, OAuth). This role requires expertise in integrating IAM solutions with various applications and cloud platforms while ensuring compliance and security best practices.

Key Responsibilities:

• Design and implement IAM solutions using Okta, Azure AD, and other Identity Providers.
• Lead SSO integrations and Federation implementations across multiple applications and platforms.
• Configure and manage authentication protocols (SAML, OIDC, OAuth, Kerberos, etc.).
• Develop and maintain identity lifecycle workflows for user provisioning and de-provisioning.
• Integrate Azure AD with on-premises and cloud directories, ensuring secure synchronization.
• Provide technical guidance on IAM best practices, security, and compliance (NIST, CMMC, CSA, etc.).
• Manage and implement Privileged Access Management (PAM) solutions (CyberArk, HashiCorp Vault, etc.).
• Work with security teams to enforce access policies and governance.
• Develop high-level (HLD) and low-level design (LLD) documents for IAM implementations.
• Troubleshoot authentication/authorization issues and provide technical support.
• Automate IAM processes using Infrastructure as Code tools (Terraform, ARM Templates).

Required Skills & Experience:

• 5+ years of hands-on experience with IAM technologies (Okta, Azure AD, PingFederate, etc.).
• Strong knowledge of SSO, MFA, Identity Federation, and Directory Services.
• Expertise in authentication protocols (SAML, OAuth, OIDC, LDAP, etc.).
• Experience with Azure IAM, Azure AD Connect, ADFS, and Conditional Access Policies.
• Hands-on experience with IAM automation using Terraform, ARM Templates.
• Experience working with Privileged Access Management (PAM) solutions like CyberArk, HashiCorp Vault.
• Strong troubleshooting and problem-solving skills related to identity, access control, and authentication.
• Experience working in multi-cloud, multi-tenant environments (AWS, Azure, GCP).
• Familiarity with regulatory frameworks (NIST, CMMC, Cloud Security Alliance, etc.).
• Experience in application onboarding and user attribute mapping.
• Strong documentation skills (SRS, HLD, LLD, etc.).

Preferred Qualifications:

• Relevant certifications such as Okta Certified Professional, Azure Security Engineer, CISSP, or AWS Certified Security.
• Experience with third-party security integrations in IAM solutions.
• Prior experience working with passwordless authentication and secrets management.

Operational Responsibilities:

• Perform daily maintenance and updates for IAM solutions.
• Monitor and troubleshoot authentication issues.
• Assist with training IT teams on IAM best practices.
• Engage with product vendors to resolve IAM-related issues.

Tools & Technologies:

• IAM Solutions: Okta, Azure AD, ADFS, PingFederate, SiteMinder
• Authentication Protocols: SAML, OAuth, OIDC, LDAP, Kerberos
• Cloud Platforms: Azure, AWS, GCP
• Infrastructure as Code: Terraform, ARM Templates
• PAM & Secrets Management: CyberArk, HashiCorp Vault, AWS KMS
• Security Compliance: NIST, CMMC, Cloud Security Alliance (CSA)